$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft File: GF_2ZH4elndQE3e1UVR5uelGEGc.mft (raw, json) Hash identifier: JjcnRDCJy2aXRsqGyozKOOauBqu7QRCSY54NJCnq0Is= Subject key identifier: CC:09:74:01:F7:A8:4D:FE:8A:33:D5:BF:8A:AB:0C:DB:C4:D5:A0:7E Authority key identifier: 18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 Certificate issuer: /CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Certificate serial: 112F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft Manifest number: 1125 Signing time: Fri 22 Nov 2024 17:16:16 +0000 Manifest this update: Fri 22 Nov 2024 17:16:15 +0000 Manifest next update: Fri 29 Nov 2024 17:16:15 +0000 Files and hashes: 1: GF_2ZH4elndQE3e1UVR5uelGEGc.crl (hash: BARUFD1VNjdrdMuu8EJ+XGL06lJWVwVzs1WjkBiewOE=) 2: A1E87910832A11ECA409521EC4F9AE02.roa (hash: GHZUJVUiu7TjOQPlC9Czp21OsffLY36D9ErlKj0Wa3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4399 (0x112f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Validity Not Before: Nov 22 17:16:15 2024 GMT Not After : Nov 29 17:16:15 2024 GMT Subject: CN=6740bc5f-b95e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:52:18:b8:99:28:a1:65:53:59:be:46:ab:92: ff:d2:e7:85:90:ab:f3:28:dc:c1:01:67:80:48:15: d0:ff:42:d4:8b:39:20:14:82:1a:19:e9:cf:f8:1b: f8:a4:6e:b2:ac:b4:cb:41:26:eb:30:7d:d6:03:e7: 7c:49:26:2f:ae:b2:ee:79:77:ef:2b:97:d7:31:cf: 95:f3:8a:12:19:47:ef:a8:b1:10:98:ae:91:2e:c0: 73:74:bb:cf:34:8f:ef:ab:98:b2:2c:ca:ac:44:62: d1:8f:76:31:e5:06:cd:06:f1:87:e4:58:04:3f:60: f0:58:fa:b8:5f:ad:aa:9b:a8:05:ac:6b:41:b0:5c: b7:87:3d:73:27:59:42:e2:2c:75:80:5b:3d:87:e0: b0:bb:c8:87:0d:a1:a7:a2:55:56:27:b0:c4:ae:d2: 80:0f:93:ff:c9:c8:5f:a1:cd:de:59:4f:07:88:09: b5:c3:97:ee:ca:0f:23:38:8d:7b:6a:28:f7:4f:52: c6:03:41:1a:e5:c0:8a:fb:cf:89:b7:08:06:1e:ea: 14:64:ae:af:a0:44:ab:09:e8:31:eb:b5:03:a7:19: 59:7c:dd:93:8a:7c:4d:34:bf:fd:a8:43:61:c4:c9: 30:65:6b:a0:d4:6e:16:7b:1f:10:cf:5a:56:be:d6: a2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:09:74:01:F7:A8:4D:FE:8A:33:D5:BF:8A:AB:0C:DB:C4:D5:A0:7E X509v3 Authority Key Identifier: keyid:18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:1d:c0:08:3b:31:de:11:29:0d:e1:97:b4:92:97:6b:2c:73: 09:7d:83:66:ad:13:39:91:83:49:ba:ae:cc:81:ed:9d:04:8b: 65:ab:83:bb:c3:83:56:bf:15:70:fe:82:62:ac:5b:6c:48:27: 88:74:04:3a:b0:c1:88:dc:86:3d:8e:d2:bb:25:b1:1e:06:ec: ff:33:19:5c:4f:92:d2:74:c9:5a:d2:20:7f:86:d4:d3:ce:08: 71:9c:8d:58:c6:47:e0:18:85:cf:92:59:b0:3d:a0:24:7e:b7: f6:2d:be:d6:ea:88:3f:e5:9d:46:9a:96:70:4a:fc:1e:ca:e1: 1f:0b:3b:d5:58:9f:e4:64:55:ab:f4:6e:67:fe:12:f5:61:4d: 70:83:57:2f:5e:06:8a:61:d2:df:ad:d2:e4:c2:c1:15:af:ca: 7f:9f:ca:4e:8c:f5:b2:4c:fb:8c:31:b5:47:ca:04:e9:5a:c4: 5c:56:ab:3b:c6:50:c1:d9:8a:0a:72:85:e9:27:63:46:fb:54: cd:65:39:5f:43:4f:11:f9:c9:4c:d9:9c:86:4d:9a:bd:a6:c5: ad:eb:fb:a0:32:59:60:f3:47:9d:cf:ed:d3:9c:73:a1:8e:76: b8:c7:7d:83:29:4f:ad:ed:84:ab:5f:9b:75:8a:a8:ad:31:b5: 65:1c:25:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICES8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNDODUxMTAvBgNVBAUTKDE4NUZGNjY0N0UxRTk2Nzc1MDEzNzdCNTUxNTQ3OUI5 RTk0NjEwNjcwHhcNMjQxMTIyMTcxNjE1WhcNMjQxMTI5MTcxNjE1WjAYMRYwFAYD VQQDEw02NzQwYmM1Zi1iOTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lIYuJkooWVTWb5Gq5L/0ueFkKvzKNzBAWeASBXQ/0LUizkgFIIaGenP+Bv4 pG6yrLTLQSbrMH3WA+d8SSYvrrLueXfvK5fXMc+V84oSGUfvqLEQmK6RLsBzdLvP NI/vq5iyLMqsRGLRj3Yx5QbNBvGH5FgEP2DwWPq4X62qm6gFrGtBsFy3hz1zJ1lC 4ix1gFs9h+Cwu8iHDaGnolVWJ7DErtKAD5P/ychfoc3eWU8HiAm1w5fuyg8jOI17 aij3T1LGA0Ea5cCK+8+JtwgGHuoUZK6voESrCegx67UDpxlZfN2TinxNNL/9qENh xMkwZWug1G4Wex8Qz1pWvtaiTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwJdAH3 qE3+ijPVv4qrDNvE1aB+MB8GA1UdIwQYMBaAFBhf9mR+HpZ3UBN3tVFUebnpRhBn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0M4NS80RkY0Q0I3MkZE RTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxuZFFFM2UxVVZSNXVlbEdF R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGXzJaSDRlbG5kUUUzZTFVVlI1dWVsR0VHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0M4NS80RkY0Q0I3MkZERTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxu ZFFFM2UxVVZSNXVlbEdFR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUHcAIOzHeESkN4Ze0kpdrLHMJfYNmrRM5kYNJuq7Mge2dBItlq4O7 w4NWvxVw/oJirFtsSCeIdAQ6sMGI3IY9jtK7JbEeBuz/MxlcT5LSdMla0iB/htTT zghxnI1YxkfgGIXPklmwPaAkfrf2Lb7W6og/5Z1GmpZwSvweyuEfCzvVWJ/kZFWr 9G5n/hL1YU1wg1cvXgaKYdLfrdLkwsEVr8p/n8pOjPWyTPuMMbVHygTpWsRcVqs7 xlDB2YoKcoXpJ2NG+1TNZTlfQ08R+clM2ZyGTZq9psWt6/ugMllg80edz+3TnHOh jna4x32DKU+t7YSrX5t1iqitMbVlHCXH -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:08 2024 by rpki-client on console-ams.rpki-client.org